$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/514e116e-7b0c-3978-b9a2-1653b3a7d019.roa File: 514e116e-7b0c-3978-b9a2-1653b3a7d019.roa (raw, json) Hash identifier: eZSrOicfsAxaX41NY266lUdsum/hYBDzgFcchkM4h9U= Subject key identifier: 5F:83:8E:5E:9F:81:89:DD:53:D3:B0:C1:BA:CB:08:01:98:43:4F:BB Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584CB551CA858BF1CB8787B1CC28 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/514e116e-7b0c-3978-b9a2-1653b3a7d019.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 2615 IP address blocks: 147.1.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:ca:85:8b:f1:cb:87:87:b1:cc:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=a429adad-7249-423c-a0ca-3b2b09ab3a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c7:8d:1d:1c:61:d4:32:42:be:36:ff:13:ce: f0:8d:ab:64:56:6c:25:9a:4e:59:3f:c3:a5:c1:cb: 62:94:be:f3:c2:7d:c7:41:2d:f2:c3:3d:df:93:c7: 12:75:20:56:2c:a1:d7:89:15:a2:ba:5a:1e:5c:2a: 5e:3f:c0:73:d7:db:65:42:0d:e4:1c:68:e4:83:96: 53:c5:d0:c2:38:b1:20:db:c2:7f:04:00:50:99:05: ff:80:c8:fc:e7:ca:05:3b:7b:42:03:a2:e6:0d:d0: 5b:7b:53:af:51:6d:5c:2f:58:7f:01:87:25:9c:83: 04:ce:c0:85:d7:28:14:bb:01:c9:21:37:86:2f:71: 40:7f:e0:ba:e7:72:aa:29:4f:e9:ea:60:57:7a:7a: c7:83:86:1c:a7:39:01:fa:5f:fb:c7:41:31:75:61: 40:3d:a3:75:b4:16:5c:47:d6:46:67:86:d2:78:84: cb:91:69:68:dc:1b:52:07:c6:83:34:53:20:1b:cf: 9c:f7:74:c7:2a:8d:d8:48:f6:aa:6f:ed:d9:ac:45: 05:62:80:a0:ac:89:68:fe:6e:29:42:f6:4b:f9:25: c1:44:49:e8:ea:c5:c9:5f:17:e6:ff:58:52:e1:ad: da:75:8b:75:54:17:e4:66:28:73:76:d1:57:ca:68: 31:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:83:8E:5E:9F:81:89:DD:53:D3:B0:C1:BA:CB:08:01:98:43:4F:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/514e116e-7b0c-3978-b9a2-1653b3a7d019.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:1f:b0:c7:b7:2c:84:16:ea:1f:65:1d:56:1c:b5:3d:78:1e: 4a:a6:2a:0e:51:fe:72:2f:d0:f3:c8:7e:e4:be:3e:1f:49:8f: b9:65:64:07:f6:60:3d:79:9d:e7:71:ef:01:4b:23:35:6b:a4: fe:6d:b0:8c:3d:19:a0:18:14:2c:26:e6:47:75:d6:e4:3e:b3: 7f:53:89:d3:08:30:f1:93:d0:ef:5f:31:88:16:0d:ca:97:80: 85:8d:ae:62:76:22:b8:bb:8d:40:b3:05:49:0d:cd:fc:0c:49: 51:24:32:16:c8:b6:12:ab:7e:95:d1:36:1f:cb:57:3b:57:53: ec:c0:91:1d:04:45:b5:97:09:c0:ab:f3:57:f7:00:19:5b:10: 7f:eb:33:ce:a3:0f:5b:a8:b9:b4:e6:8a:32:49:a0:98:59:9f: d7:fe:95:3b:4f:22:93:1c:1d:7e:4a:d8:5c:ab:0f:4b:7e:48: 9d:08:18:1d:a4:a4:20:b4:10:71:7a:4e:d9:45:b1:da:b4:7b: b1:47:72:06:e7:0b:88:a5:d7:7d:3f:f0:1a:f9:32:b6:4b:49: ee:e8:b4:5e:d0:c8:b4:fe:ee:14:c0:e5:ff:5a:ff:44:30:35: d0:16:0c:95:a2:2a:c0:18:14:2a:c9:c1:ec:26:ff:45:91:c3: 69:d6:4e:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1UcqFi/HLh4exzCgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk YTQyOWFkYWQtNzI0OS00MjNjLWEwY2EtM2IyYjA5YWIzYTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8eNHRxh1DJCvjb/E87wjatkVmwlmk5ZP8Ol wctilL7zwn3HQS3ywz3fk8cSdSBWLKHXiRWiuloeXCpeP8Bz19tlQg3kHGjkg5ZT xdDCOLEg28J/BABQmQX/gMj858oFO3tCA6LmDdBbe1OvUW1cL1h/AYclnIMEzsCF 1ygUuwHJITeGL3FAf+C653KqKU/p6mBXenrHg4YcpzkB+l/7x0ExdWFAPaN1tBZc R9ZGZ4bSeITLkWlo3BtSB8aDNFMgG8+c93THKo3YSPaqb+3ZrEUFYoCgrIlo/m4p QvZL+SXBREno6sXJXxfm/1hS4a3adYt1VBfkZihzdtFXymgxfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+Djl6fgYndU9OwwbrLCAGYQ0+7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvNTE0ZTExNmUtN2IwYy0z OTc4LWI5YTItMTY1M2IzYTdkMDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4fsMe3LIQW6h9lHVYctT14HkqmKg5R/nIv0PPIfuS+Ph9Jj7llZAf2 YD15nedx7wFLIzVrpP5tsIw9GaAYFCwm5kd11uQ+s39TidMIMPGT0O9fMYgWDcqX gIWNrmJ2Iri7jUCzBUkNzfwMSVEkMhbIthKrfpXRNh/LVztXU+zAkR0ERbWXCcCr 81f3ABlbEH/rM86jD1uoubTmijJJoJhZn9f+lTtPIpMcHX5K2FyrD0t+SJ0IGB2k pCC0EHF6TtlFsdq0e7FHcgbnC4il130/8Br5MrZLSe7otF7QyLT+7hTA5f9a/0Qw NdAWDJWiKsAYFCrJwewm/0WRw2nWTlM= -----END CERTIFICATE-----Generated at Mon Mar 2 18:08:22 2026 by rpki-client